This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft File: sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json) Hash identifier: 6MlMp/RQ+bna4+AufeJ4ISwdoi+HGD+Bp7pmFMZZuK4= Subject key identifier: F6:7D:F0:72:74:67:0A:46:63:19:02:1B:BA:42:C3:04:74:23:3C:AF Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD Certificate issuer: /CN=b00e25f55ebbacb069f103acb0866703835cfccd Certificate serial: 019B427FE7F7743C3DB7EBB3264E21B02ED5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft Manifest number: 1397 Signing time: Sun 21 Dec 2025 20:00:37 +0000 Manifest this update: Sun 21 Dec 2025 20:00:37 +0000 Manifest next update: Mon 22 Dec 2025 20:00:37 +0000 Files and hashes: 1: IQVuYRD39w1eDGvQI5n6qd53zJ0.roa (hash: YMuLKblQhuUFH21p6Ke9CEB5Y7GrJ0BpmU+txXFqoC4=) 2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: WlKEp64T8b2X7t1JJ6OOcDnxJJSNBCDj8IPw6L0ejPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:7f:e7:f7:74:3c:3d:b7:eb:b3:26:4e:21:b0:2e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd Validity Not Before: Dec 21 20:00:37 2025 GMT Not After : Dec 22 20:00:37 2025 GMT Subject: CN=f67df07274670a466319021bba42c30474233caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:07:c5:eb:e6:05:1a:d3:08:c9:d7:ba:52:7e: f1:c7:49:4a:c9:e9:55:56:0b:e2:cc:5c:c6:c9:15: c0:25:a0:e1:f0:bc:a5:4f:2f:a6:a4:41:dc:37:72: 09:14:71:3c:c5:e4:93:74:50:30:d6:d0:03:f4:5b: a2:20:a3:be:ee:b4:c0:72:a1:15:b9:04:81:5d:bd: 40:6f:09:aa:4e:2e:ce:95:4d:15:df:0a:dd:f0:b9: 39:7d:a9:e3:77:ed:44:56:30:93:70:8c:07:61:43: 7c:5b:bd:5b:c1:78:b6:75:2c:fb:41:5c:92:94:aa: e3:04:29:fd:1a:4d:5c:c8:71:39:0a:15:43:84:ce: c5:67:ca:61:c2:34:75:04:be:53:da:88:44:50:24: df:dc:db:10:f4:0e:9d:28:2d:31:e5:25:61:d1:c2: 42:75:61:2b:5e:e9:59:3c:49:99:bd:4b:32:69:6c: 6b:50:31:fe:7a:66:7b:57:7a:bc:9a:59:03:5c:f9: 12:4c:a3:d6:62:c4:d7:df:68:9b:67:07:f5:31:2e: b4:ab:4c:0f:91:75:d2:51:75:61:87:21:b8:d5:da: 31:e5:16:4b:8f:e0:1b:b3:4c:c7:a6:25:f5:86:7a: bf:21:fb:77:d3:4c:f6:27:89:d5:8b:e9:58:62:e7: 18:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7D:F0:72:74:67:0A:46:63:19:02:1B:BA:42:C3:04:74:23:3C:AF X509v3 Authority Key Identifier: keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:34:43:89:48:e6:07:6d:da:b9:14:c2:53:fe:e7:8d:75:4a: d6:25:0a:b3:b6:f9:f0:47:49:d9:47:c6:f3:bc:62:37:6c:b4: 3f:cb:8d:fc:43:66:4d:78:b1:30:5b:f3:7e:09:ea:b7:8d:d8: 87:38:ff:6e:d3:cc:3e:76:c8:ce:51:0b:47:98:48:e4:ad:79: f3:47:89:98:22:1f:96:b6:94:ba:24:7d:05:ea:96:2e:1e:7a: 1f:e4:90:8b:7c:7f:6f:c3:de:1e:81:da:3e:ee:1c:d8:73:88: ac:92:15:91:f5:3d:a3:da:c0:45:76:16:f1:a0:9e:fb:e0:9d: a5:bc:c7:78:28:3b:2d:dc:74:78:7c:c6:bf:cb:98:5d:5b:21: 2f:ea:a8:13:11:9b:75:df:ad:21:25:6e:df:b1:36:76:a3:cd: 03:48:e7:e2:a7:ff:c5:5f:45:46:ff:14:df:ef:aa:50:79:01: a3:72:4b:fc:dc:65:8d:5b:19:e5:8d:ca:28:e2:ac:26:19:0b: 87:4a:72:0f:af:ec:54:63:24:33:9c:37:ae:d0:19:d4:c5:5f: b5:31:5e:51:9a:2b:85:21:93:fb:3b:ce:e4:bb:3f:5f:42:43: 4a:77:a3:b5:d6:d1:ed:38:d6:d0:e5:5d:05:c8:35:6b:9f:51: 31:4a:c6:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCf+f3dDw9t+uzJk4hsC7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMGUyNWY1NWViYmFjYjA2OWYxMDNhY2IwODY2NzAzODM1 Y2ZjY2QwHhcNMjUxMjIxMjAwMDM3WhcNMjUxMjIyMjAwMDM3WjAzMTEwLwYDVQQD EyhmNjdkZjA3Mjc0NjcwYTQ2NjMxOTAyMWJiYTQyYzMwNDc0MjMzY2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwfF6+YFGtMIyde6Un7xx0lKyelV VgvizFzGyRXAJaDh8LylTy+mpEHcN3IJFHE8xeSTdFAw1tAD9FuiIKO+7rTAcqEV uQSBXb1AbwmqTi7OlU0V3wrd8Lk5fanjd+1EVjCTcIwHYUN8W71bwXi2dSz7QVyS lKrjBCn9Gk1cyHE5ChVDhM7FZ8phwjR1BL5T2ohEUCTf3NsQ9A6dKC0x5SVh0cJC dWErXulZPEmZvUsyaWxrUDH+emZ7V3q8mlkDXPkSTKPWYsTX32ibZwf1MS60q0wP kXXSUXVhhyG41dox5RZLj+Abs0zHpiX1hnq/Ift300z2J4nVi+lYYucYTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZ98HJ0ZwpGYxkCG7pCwwR0IzyvMB8GA1UdIwQY MBaAFLAOJfVeu6ywafEDrLCGZwODXPzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0E0bDlWNjdyTEJwOFFPc3NJWm5BNE5jX00wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zMWEwZWMtZDliOC00OWU0LWI0MzYt OGI0MjE1ZTU4MDI4LzEvc0E0bDlWNjdyTEJwOFFPc3NJWm5BNE5jX00wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8zMWEwZWMtZDliOC00OWU0LWI0MzYtOGI0MjE1ZTU4MDI4 LzEvc0E0bDlWNjdyTEJwOFFPc3NJWm5BNE5jX00wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuDRDiUjm B23auRTCU/7njXVK1iUKs7b58EdJ2UfG87xiN2y0P8uN/ENmTXixMFvzfgnqt43Y hzj/btPMPnbIzlELR5hI5K1580eJmCIflraUuiR9BeqWLh56H+SQi3x/b8PeHoHa Pu4c2HOIrJIVkfU9o9rARXYW8aCe++CdpbzHeCg7Ldx0eHzGv8uYXVshL+qoExGb dd+tISVu37E2dqPNA0jn4qf/xV9FRv8U3++qUHkBo3JL/NxljVsZ5Y3KKOKsJhkL h0pyD6/sVGMkM5w3rtAZ1MVftTFeUZorhSGT+zvO5Ls/X0JDSnejtdbR7TjW0OVd Bcg1a59RMUrG7w== -----END CERTIFICATE-----Generated at Mon Dec 22 00:51:07 2025 by rpki-client